CLAIMS 

What is claimed is: 

1 . A method of enhancing throughput of a pipelined encryption/decryption engine 
2 for an encryption/decryption process comprising a predetermined number of stages and 

providing feedback around the stages, the method comprising the steps of: 
4 receiving a source datablock for a given stage and encryption/decryption context 

identifier; 

6 indexing according to the encryption/decryption context identifier into a bank of initial 

variables to retrieve an initial variable for the source datablock, the bank comprising a plurality 
8 of initial variables for each encryption/decryption context identifier; and 

generating an output datablock from the source datablock and its corresponding initial 
0 variable. 

2. The method of claim 1 wherein in the indexing step the bank of initial variables 
comprises a number of initial variables for each encryption/decryption context identifier that is at 
least as large as the predetermined number of stages. 

3. The method of claim 1 additionally comprising the step of replacing the 
corresponding initial variable with the output datablock. 

4. The method of claim 1 wherein the encryption/decryption process comprises 
Cipher Block Chaining Mode with exception of handling of initial variables. 

5. The method of claim 4 wherein the encryption/decryption process comprises a 
block cipher capable of being pipelined. 

6. The method of claim 5 wherein the process is Digital Encryption Standard (DES). 

7. A method of enhancing throughput of a pipelined encryption/decryption engine 
2 for an encryption/decryption process comprising a predetermined number of stages and 

providing feedback around the stages, the method comprising the steps of: 



SD6769ppm_witzke_revl .doc(GL) 



9 



10/03/2001 



4 for each of a plurality of encryption/decryption contexts, a number of which equals or 

exceeds the predetermined number of stages, receiving a source datablock for the 
6 corresponding encryption context identifier; 

for each of the plurality of encryption/decryption contexts, indexing according to the 
8 encryption/decryption context identifier into a bank of variables comprising initial variables and 

prior-stage output datablocks to retrieve a seed variable for the source datablock; and 
10 for each of the plurality of encryption/decryption contexts, generating an output 

datablock from the source datablock and its corresponding seed variable; 
■02 wherein each stage of the pipelined encryption/decryption engine at any given time is 

S| processing source datablocks from an encryption/decryption context different than 
#4 encryption/decryption contexts of source datablocks being processed in all other stages of the 
fll pipelined encryption/decryption engine. 

8. The method of claim 7 wherein each of the plurality of encryption/decryption 
Q contexts comprises a telecommunications data stream to be encrypted. 
Q 9. The method of claim 8 additionally comprising the step of decrypting the output 

datablocks at a plurality of locations distributed from the encryption/decryption engine 
corresponding in number to the number of encryption/decryption contexts. 

10. The method of claim 7 wherein the encryption/decryption process comprises 
Cipher Block Chaining Mode. 

1 1 . The method of claim 10 wherein the encryption/decryption process comprises a 
block cipher capable of being pipelined such as Digital Encryption Standard (DES). 

12. A pipelined encryption/decryption engine for an encryption/decryption process 
2 comprising a predetermined number of stages and providing feedback around the stages, the 

encryption/decryption engine comprising: 
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4 means for receiving a source datablock for a given stage and encryption/decryption 

context identifier; 

6 means for indexing according to the encryption/decryption context identifier into a bank 

of initial variables to retrieve an initial variable for the source datablock, the bank comprising a 
8 plurality of initial variables for each encryption/decryption context identifier; and 

means for generating an output datablock from the source datablock and its 
10 corresponding initial variable. 

13. The encryption/decryption engine of claim 12 wherein in the indexing means the 
f bank of initial variables comprises a number of initial variables for each encryption/decryption 
I context identifier at least as large as the predetermined number of stages, 
f 14. The encryption/decryption engine of claim 12 additionally comprising means for 

replacing the corresponding initial variable with the output datablock. 
^ 15. The encryption/decryption engine of claim 12 wherein the encryption/decryption 

i process comprises Cipher Block Chaining Mode with exception of handling of initial variables, 
f 16. The encryption/decryption engine of claim 15 wherein the encryption/decryption 

process comprises a block cipher capable of being pipelined such as Digital Encryption 
Standard (DES). 

17. An encryption/decryption engine for enhancing throughput of a pipelined 
2 encryption/decryption process comprising a predetermined number of stages and providing 

feedback around the stages, the method comprising the steps of: 
4 means for, as to each of a plurality of encryption/decryption contexts, a number 

of which equals or exceeds the predetermined number of stages, receiving a source datablock 
6 for the corresponding encryption context identifier; 
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means for, as to each of the plurality of encryption/decryption contexts, indexing 
8 according to the encryption/decryption context identifier into a bank of variables comprising 
initial variables and prior-stage output datablocks to retrieve a seed variable for the source 
10 datablock; and 

means for, as to each of the plurality of encryption/decryption contexts, 
12 generating an output datablock from the source datablock and its corresponding seed variable; 

wherein each stage of the pipelined encryption/decryption engine at any given 
14 time is processing source datablocks from an encryption/decryption context different than 

encryption/decryption contexts of source datablocks being processed in all other stages of the 
He pipelined encryption/decryption engine. 

41 18. The encryption/decryption engine of claim 17 wherein each of the plurality of 

W encryption/decryption contexts comprises a telecommunications data stream to be encrypted. 
^ 19. The encryption/decryption engine of claim 18 additionally comprising means for 

O transmitting the output datablocks to be decrypted at a plurality of locations distributed from the 
Q encryption/decryption engine corresponding in number to the number of encryption/decryption 
contexts. 

20. The encryption/decryption engine of claim 17 wherein the encryption/decryption 
process comprises Cipher Block Chaining Mode. 

21 . The encryption/decryption engine of claim 20 wherein the encryption/decryption 
process comprisesa block cipher capable of being pipelined such as Digital Encryption Standard 
(DES). 
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